<<

The following table identifies the log types that the Binary Defense SIEM supports out of the box. SUPPORTED SOFTWARE Vendor Supported Software A10 Thunder WAF Abas ERP Abas Accellion Kiteworks Actiontec Verizon FIOS Adtran NetVanta Aerohive Networks Wireless Access Point Alcatel Arista Switch AlienVault Agent | Availability-Monitoring | HIDS | Monit | Monitor |Netflow Alerts | NIDS | Nmap Hosts | Nmap Monitor | OCS Monitor | Ping Monitor | Post-Correlation | TCPTrack Monitor | USBdev | User Activity | Whois Monitor | WMI Application Logger | WMI Monitor | WMI Security Logger | WMI System Logger Allot Communications NetEnforcer Amun Amun Honeypot Anti-Spam SMTP Proxy Anti-Spam SMTP Proxy Apache Software Foundation Apache HTTP Server | OpenLDAP | SpamAssassin | Tomcat | Apple AirPort Extreme | OS-X AQTRONiX WebKnight Arbor Networks Pravail APS Arista Switches Arpalert Arpalert Array Networks Secure Access Gateway Artemisa Artemisa Honeypot Artica Proxy Aruba Networks Airwave | ClearPass | Mobility Access Switches | Wireless Asterisk VoIP AsusTek Wireless Router Automatic Software Solutions HoneyBOT Automation Access Tarantella Avast Free Antivirus Avaya Media Gateway | VSP switches | Wireless LAN Barracuda Link Balancer | Next Gen | Spam Firewall | SSL VPN | Web Application Firewall | Web Filter Binary Defense Artillery Honeypot Bitdefender GravityZone Blackboard Learn Blue Coat PacketShaper | ProxySG Bomgar Remote Support and Privileged Access Bro Bro NSM Broadweb IPS-Netkeeper | Netkeeper NIDS Brocade Brocade Devices | vRouter Bromium vSentry Buffalo AM TeraStation Canary Tools Carbon Black Defense | Enterprise Protection | Enterprise Response Cerberus FTP Server Check Point FireWall | Media Encryption and Port Protection Ciena Packetwave

Confidential & Proprietary Information 1

Cisco ACE Application Control Engine | ACS Secure Access Control Server | ASA Adaptive Security Appliance | ASR Aggregation Services Router | AsyncOS Email Security Appliance | Call Manager | Cisco Unified Border Element | Expressway | FirePower | Firewall Services Module | IDS Intrusion Detection System | IPS Intrusion Prevention System | IronPort | ISA | ISE | Lancope StealthWatch | Meraki | Next Generation Intrusion Prevention System NGIPS | NX-OS | OpenDNS Enterprise Insights | PIX Private Internet eXchange | Prime | Router | RV Series VPN Router | Unified Communications Manager | Unified Computing System | Viptela | VPN | VPN 3000 Series | Wireless LAN Controller Citrix NetScaler ClamAV ClamAV ClamWin ClamWin Free Antivirus Claroty Platform Clearswift Secure Email Gateway ClickStudios Passwordstate CloudPassage Halo Comodo Antivirus ContentKeeper Secure Internet Gateway Corero IPS CorreLog CorreLog Windows Agent and Toolkit Coslat Security Systems Hotspot Courier-MTA Courier Mail Server CrowdStrike Falcon Host CrushFTP CrushFTP CRYPTTECH CryptoSPOT CyberArk Enterprise Password Vault CyberGuard SG565 CyberX XSense Cylance CylancePROTECT Cyphort Cyphort APT Defense Platform D-Link DES Series | Unified Wireless Controller | UTM Firewall Damballa Failsafe Darktrace DCIP Datto Siris Platform Dell EMC DataDomain | EMC Isilon | EMC Recover Point | EMC VNXe | EqualLogic | Foce10 Switches | iDRAC | M1000 Chassis | SecureWorks | SonicWALL Scrutinizer | SonicWall VPN | Switches DenyAll DenyAll WAF Digital Defense Incorporated Frontline Vulnerability Manager Digital Guardian Digital Guardian Dovecot Secure IMAP Server DrayTek Vigor Drupal Drupal CMS Dtex Systems Dtex Duo Two-Factor Authentication Edgewave iPrism Enterasys Dragon IDS | Matrix N- Series Envault Airlock Eset Eset Evolium Redtrust Extenua SilverSHielD ExtraHop Reveal

Confidential & Proprietary Information 2

Extreme Networks NetSight NAC Manager | Summit Series | Switch F5 BIG-IP | FirePass SSL VPN Fail2ban Fail2ban FalconStor Software IPStor FatPipe Networks MPVPN FireEye CM | HX Series | MPS ForcePoint DLP | Triton AP-Web | NG Firewall ForeScout CounterACT Fortinet FortiAuthenticator | FortiGate | FortiGuard | FortiMail | Fortiweb | fortiWLC | Meru Networks WLAN Controller FreeBSD IPFW Firewall | NTPdate Free IPA FreeIPA FreeRADIUS Freeradius Gajshield Firewall

gajshield gajproactive GeCAD Axigen Mail Server Geist Watchdog GFI Vipre Antivirus Global Technology Associates Firewall H3C AP | Ethernet Switch HAProxy HAProxy HARPP HARPP DDoS Mitigator HelpSystems Powertech Interact Hitachi NAS Platform Honeyd Honeyd Virtual Honeypot Honeynet Project GlastopfNG Honeypot | Nepenthes Honeypot HP BladeSystem Chassis | E-Series Mobility | EVA Storage | MSM Integrated Controller | SAN Switch | Serviceguard | SiteScope | Switch HPE 3PAR | Integrated Lights Out Huawei Enterprise Router | IPS | NG-Firewall HyTrust Key Control IBM Aix Audit | AS400 | Fidelis Network Data Loss Protection | InfoSphere Guardium | Integrated Management Module | Proventia IPS | RASlog | RealSecure Server Sensor | Storwize V7000 | Tivoli Access Manager WebSEAL | VisionPLUS | Websphere IBM Internet Security Systems Site Protector IBoss Iboss Immunity El Jefe Imperva Incapsula WAF | SecureSphere Imprivata Onesign Infoblox DNS Server Innovative Solutions LinQ2FA Intersect Alliance Snare Inverse Inc PacketFence ISC BIND Juniper Networks EX Series | IDP Series | ISG Series | MX Routers | NetScreen Security Manager | NetScreen Series Firewall | NetWork and Security Manager | NSM Network and Security Manager | SA Secure Access Series | SRX Series Kaspersky Antivirus | Security Center

Confidential & Proprietary Information 3

Kemp Technologies VLM-2000-W

Kerio Technology Kerio Connect Kismet Kismet Wireless DHCP | DHCP Server | NFS Network File System | Useradd/Groupadd Linux-HA Heartbeat Locum Real Time Mpnitor LOGbinder LOGbinder for SharePoint Lucent VPN Firewall Brick M0n0wall M0n0wall Embedded Firewall Malwarebytes Breach Remediation | Endpoint Security | Malwarebytes Manage Engine ADAudit Plus | Password Manager Pro McAfee Anti-Spam | Antivirus Engine | Database Security | ePolicy Orchestrator | Firewall Enterprise | IntruShield IPS | McAfee-MWG | MVISION Cloud | Network Security Platform Microfocus Voltage Microsoft Advanced Threat Analytics | Advanced Threat Protection | DHCP Client Service | DNS Server | Enhanced Mitigation Experience Toolkit | Exchange Server | IIS | ISA Internet Security and Acceleration Server | MSSQL | Multi-Factor Authentication | Network Policy Server | Office 365 Advanced Security Management | SCOM | SQL Server | Sysmon | System Center Configuration Manager | Windows | Windows Firewall | Windows IIS FTP Server MikroTik Router MobileIron Sentry Moodle Moodle Motorola RFS 4000 | RFS Series Mwcollect Mwcollect Honeypot NBS System Naxsi Netasq U-Series Netgear FVS318 ProSafe VPN Firewall | Switch NETGEAR Switch NetMotion Moblity VPN Netwrix Netwrix Auditor NGinX NGinX Nimble Nimble-OS NLnetlabs Unbound DNS

Nortel Networks Alteon | Baystack Ethernet Switch | Passport 1612 Switch NTSyslog NTSyslog ObserveIT ObserveIT OISF Suricata Open-Xchange PowerDNS OpenBSD OpenSSH | PF Packet Filter OpenLDAP OpenLDAP OpenNMS OpenNMS IPsec OpenVPN OpenVPN Access Server Optenet MailSecure Oracle Audit Vault and Database Firewall | Database Server | JD Edwards EnterpriseONE | MySQL Server | Oracle Access Manager | Palerra Cloud Security | WebLogic Server | OSC Radiator RADIUS Sever Osiris Osiris HIDS

Confidential & Proprietary Information 4

OSquery OSquery OwnCloud OwnCloud Palo Alto Networks PA-5000 Series | Traps Panda Security AdminSecure | Security for Enterprise Peplink Balance Multi-WAN Router Plixer Scrutinizer Portnox CORE Postfix Postfix PostgreSQL GDG Postgresql Power Admin PA File Sight Prads Prads Preempt Security Behavioral Firewall ProFTPD ProFTPD Proofpoint Protection Server | Targeted Attack Protection | Threat Response Proxim Orinoco AP700 Pulse Secure Remote Access VPN | Virtual Traffic Manager Pure Storage Purity Operating Environment Pure-FTPd Pure-FTPd QNAP QTS Quest Software Defender GO-6 Token Quick Heal SQEPS6.3 RAD ETX-2

Radware APSolute Vision | DefensePro Rapid7 Nexpose Audit | JBoss Middleware | Resource Group (Cluster Service) Manager Daemon Riverbed Technology SteelHead | Xirrus Wireless Access Point Roksit Roksit DNS Firewall RRDtool RRDtool RSA Authentication Manager | SecurID | SecurID Software Token Converter RSA Security SecurID IDR Rubrik Backup Ruckus ZoneDirector SafeNet Authentication Service SafeNet eSafe Samba Samba SMB Samhain Labs Samhain Sangfor IAM | NGFW SAP NetWeaver SDS VitalSigns SIEM Agent Sectona Spectra PAM SecureAuth SecureAuth SecureLink Enterprise Security Matters SilentDefense Seeburger BIS SELinux SELinux SendMail SendMail Sensplorer Environment Monitoring System

SentinelOne SentinelOne Shorewall Shorewall Shrubbery Networks TACACS+

Confidential & Proprietary Information 5

SiteMinder Policy-Server Snort Snort Softerra Adaxes SoftEther VPN SoftEther VPN Solida Systems International Solida SL-6000 Sophos Antivirus | Central | Cyberoam-Firewall | EC | ES | Secure Web Gateway | Sophos-UTM | XG Squid Squid Cache Proxy SquidGuard SquidGuard STEALTHbits Activity Monitor | StealthINTERCEPT Stonesoft IPS | StoneGate Stormshield Network Security Stunnel Sudo Sudo Suhosin Suhosin PHP Security Extension Suse IPTables Symantec AMS | ATP | Data Loss Prevention | Endpoint Protection | Messaging Gateway | Protection Synology DiskStation Syslog Syslog Tanium EndPoint Platform Tenable Nessus Tesserent Managed Next Gen Firewall Thycotic Software Secret Server TitanHQ SpamTitan | Web Titan Gateway Trend Micro Control Manager | Deep Discovery Analyzer | Deep Discovery Inspector | Deep Security Agent | Deep Security Manager | InterScan Messaging Security | InterScan Web Security Virtual Applicance | TippingPoint IPS | Vulnerability Protection Tripwire Enterprise Trustwave Secure Web Gateway TrustWave SpiderLabs ModSecurity Web Application Firewall Tufin Tufin Orchestration Suite Ubiquiti TOUGHSwitch PoE | Unifi UNIX PAM Pluggable Authentication Module Untangle NG Firewall VanDyke VShell vArmour Firewall Varonix DatAdvantage Vectra X-Series VMware AirWatch | ESXi | NSX | Single Sign On Server | vCenter | View Administrator | vShield | Workstation Vormetric Data Security Manager Vsftpd Vsftpd WatchGuard XCS | XTM Series Webmin Webmin Webroot FlowScape Websense Content Gateway | Email Security Gateway | Web Security Gateway Wing FTP Software Wing FTP Server WU-Ftp WU_Ftp Xtera AscenLink Yara Yara ZeroFox Social Media Security SAAS Platform

Confidential & Proprietary Information 6

Zimperium zConsole zScaler Nanolog Zscaler Zscaler Private Access ZyXEL ZyWALL

Confidential & Proprietary Information 7